Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: Y6KzPsNlD4VYIXIE8uNM9+qqNh6XVMhuNMQ4kVvJlbI=
Subject key identifier: A3:A1:0D:F3:BF:BC:58:F7:FE:F0:3A:87:D1:BA:D0:BB:3D:B2:C1:5A
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019FAA87A3EB8DD6FE311C93C22709B5BF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0D03
Signing time: Tue 28 Jul 2026 21:00:43 +0000
Manifest this update: Tue 28 Jul 2026 21:00:43 +0000
Manifest next update: Wed 29 Jul 2026 21:00:43 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: +yLpLJPZSbXspCBHtS/pCsfMNcbusSgKZDscQEMiGd8=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:a3:eb:8d:d6:fe:31:1c:93:c2:27:09:b5:bf:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Jul 28 21:00:43 2026 GMT
Not After : Jul 29 21:00:43 2026 GMT
Subject: CN=a3a10df3bfbc58f7fef03a87d1bad0bb3db2c15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:5e:02:85:26:7b:ee:02:18:55:05:49:d1:
81:4a:61:c2:5a:6b:14:83:58:e5:d5:93:5d:69:db:
c1:d4:4f:1b:d4:f9:e6:97:48:45:58:58:fa:5b:27:
c2:38:31:9a:21:3d:c2:56:d4:f6:aa:9d:11:23:cb:
6a:3e:7d:2b:20:be:09:4f:8b:cf:41:a1:df:8e:bb:
bc:70:f1:5f:0a:0f:49:15:c8:9a:05:d2:26:14:f5:
d3:02:35:c7:ad:de:b1:01:41:1f:3b:2b:71:bc:8c:
92:6b:38:46:12:5b:0e:a3:a2:03:74:88:9b:4f:6b:
ca:55:f7:a0:bc:74:cf:01:0c:53:da:51:7f:f1:f3:
57:db:5f:3f:9f:4f:6b:2a:88:a9:81:63:31:91:07:
81:39:f7:5e:14:82:bf:b9:f7:f8:0e:32:5b:64:68:
a8:54:f8:ca:58:57:fa:3c:35:d5:c5:67:fb:a3:25:
f6:f3:28:86:52:6e:b7:c4:9e:e4:8e:6c:72:23:81:
59:f6:84:e1:f9:48:75:83:47:53:7c:4f:de:0c:10:
a1:aa:80:67:36:5e:ee:87:40:9e:ec:3b:d3:8a:4a:
0b:56:67:2e:d6:fc:5b:ba:df:56:61:e6:08:d3:b6:
88:a3:ff:fb:f3:6a:34:e9:ff:27:3f:94:7a:ab:90:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:0D:F3:BF:BC:58:F7:FE:F0:3A:87:D1:BA:D0:BB:3D:B2:C1:5A
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8f:6d:2c:11:ef:36:6f:94:7f:d2:5f:9c:48:de:ab:20:7c:
c4:79:ae:15:77:96:4e:74:f1:26:2f:3f:71:fe:c9:ff:1d:71:
81:de:11:15:13:3f:a0:20:d7:78:ec:7e:8c:b7:0a:51:89:d9:
f3:d7:8e:fb:cf:fe:56:59:f1:e0:59:2a:1c:10:52:37:50:88:
ac:a0:f3:68:8d:e7:c4:c7:7d:16:04:ef:fe:26:dc:5f:dd:c9:
2b:a3:99:ec:5b:d6:b1:96:54:ff:c2:bd:86:2d:2e:b3:5e:f8:
81:4b:34:4e:8b:92:cc:58:12:a5:60:82:4b:37:27:14:21:59:
55:8d:a6:71:35:01:3f:5c:ca:e4:fc:88:8a:a8:9a:94:3c:6d:
e4:3e:8e:8b:99:8b:6e:54:40:33:04:1c:d3:fe:87:26:92:d2:
fa:fe:40:cd:98:b1:19:c9:f7:3f:b3:62:92:7b:4a:5c:1f:e4:
27:aa:d2:3a:6f:2f:b6:c6:74:ab:c8:89:62:f9:49:f6:2b:18:
9a:61:85:93:28:a6:cc:40:dc:cd:be:49:1c:e2:41:77:b7:c0:
07:b5:5f:05:aa:9a:e8:84:8d:14:ef:4c:6b:0e:22:6e:2a:b4:
59:5c:b1:66:68:2f:eb:36:cd:68:1c:ad:b2:57:b2:62:f4:ee:
5b:43:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:28 2026 by rpki-client